Novell eDirectory 8.8 NDS Server Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell eDirectory. Exploitation does not require authentication. The specific flaw exists within the iMonitor NDS Server, which by default exposes an HTTP interface on TCP port 8028 and an HTTPS...

[SA20452] TIBCO Rendezvous HTTP Administrative Interface Buffer Overflow

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

CVE-2006-2830

Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent TRA before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administrative interface...

Buffer overflow

Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent TRA before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administrative interface...

CVE-2006-2830

Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent TRA before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administrative interface...

CVE-2006-2166

Unspecified vulnerability in the HTTP management interface in Cisco Unity Express CUE 2.22 and earlier, when running on any CUE Advanced Integration Module AIM or Network Module NM, allows remote authenticated attackers to reset the password for any user with an expired password...

CVE-2000-1239

The HTTP interface of Tivoli Lightweight Client Framework LCF in IBM Tivoli Management Framework 3.7.1 sets httpdisable to zero at install time, which allows remote authenticated users to bypass file permissions on Tivoli Endpoint Configuration data files via an unspecified manipulation of log...

GLSA-200404-16 : Multiple new security vulnerabilities in monit

The remote host is affected by the vulnerability described in GLSA-200404-16 Multiple new security vulnerabilities in monit Monit has several vulnerabilities in its HTTP interface : a buffer overflow vulnerability in the authentication handling code and a off-by-one error in the POST method...

Multiple new security vulnerabilities in monit

Background Monit is a system administration utility that allows management and monitoring of processes, files, directories and devices on a Unix system. Description Monit has several vulnerabilities in its HTTP interface : a buffer overflow vulnerability in the authentication handling code and a...

Moni HTTP interface multiple bugs

Buffer overflow, DoS...

[Full-Disclosure] Monit 4.1 HTTP interface multiple security vulnerabilities

S-Quadra Advisory 2003-11-24 Topic: Monit 4.1 HTTP interface Multiple Security Vulnerabilities Severity: High Vendor URL: http://www.tildeslash.com/monit/ Advisory URL: http://www.s-quadra.com/advisories/Adv-20031124.txt Release date: 22 Nov 2003 1. DESCRIPTION Monit...

ACME-mitel.txt

There is an interesting bug in a Mitel's servers for Voice over IP that allows to discover the numbers called and the numbers calling trought this dhcp server. This server is configurable via http interface and via telnet; in this case, if there is a call at moment of login/pass request, I've not...

CVE-2002-1383

Multiple integer overflows in Common Unix Printing System CUPS 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via 1 the CUPSd HTTP interface, as demonstrated by vanilla-coke, and 2 the image handling code in CUPS filters, as demonstrated by mksun...

DEBIAN-CVE-2002-1383

Multiple integer overflows in Common Unix Printing System CUPS 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via 1 the CUPSd HTTP interface, as demonstrated by vanilla-coke, and 2 the image handling code in CUPS filters, as demonstrated by mksun...

CVE-2002-1383

Multiple integer overflows in Common Unix Printing System CUPS 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via 1 the CUPSd HTTP interface, as demonstrated by vanilla-coke, and 2 the image handling code in CUPS filters, as demonstrated by mksun...

Cisco Catalist HTTP buffer overflow

Buffer overflow in HTTP interface on oversized query...

CVE-2002-1093

HTML interface for Cisco VPN 3000 Concentrator 2.x.x and 3.x.x before 3.0.3B allows remote attackers to cause a denial of service CPU consumption via a long URL request...

Cisco IOS software vulnerable to DoS via HTTP request containing "?/"

Overview A vulnerability exists in multiple versions of Cisco's Internetworking Operating System IOS software that allows an attacker to force affected switches and routers to crash and reboot. Description To exploit this vulnerability, the IOS HTTP interface must be enabled and the attacker must...

alt-n WorldClient standard 2.1 - Directory Traversal

alt-n WorldClient standard 2.1 - Directory Traversal source: https://www.securityfocus.com/bid/1462/info The HTTP interface for WorldClient 2.1 is vulnerable to a directory traversal. By requesting a URL composed of the filename and ..\ it is possible for a remote user to retrieve and dowload any...

Cayman 3220-H DSL Router 1.0GatorSurf 5.3 - Denial of Service

Cayman 3220-H DSL Router 1.0GatorSurf 5.3 - Denial of Service source: https://www.securityfocus.com/bid/1219/info Large usernames or passwords sent to the router's HTTP interface restart the router. Router log will show "restart not in response to admin command" Open the router interface with you...